Mark Litchfield has reported a vulnerability in SAP Web Application Server, which can be exploited by malicious people to cause a DoS (Denial of Service).

The vulnerability is caused due to an error within the Internet Communication Manager (ICM - ICMAN.exe) component and can be exploited to crash the ICM process by requesting an overly long (around 264 bytes), specially crafted URI.

Solution
Update to the latest version.

Provided and/or discovered by
Mark Litchfield, NGSSoftware

Changelog
Further details available to Secunia VIM customers

Original Advisory
http://www.ngssoftware.com/advisories/high-risk-vulnerability-in-internet-communication-manager-dos/

Deep Links
Links available to Secunia VIM customers